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1 Introduction 

r-| ! Let E be an elliptic curve over Q and put gE/q — rank of E(Q). Let 



IIl(£/Q) = Ker^Q,^)^©^ 1 ^,^)), 



where t> ranges over all places of Q and Q v is the completion of Q at v, denote its Tate- 
Shafarevich group. As usual, L(E/Q,s) is the complex L-function of E over Q. Since 
^ E is now known to be modular, Kolyvagin's work [11] shows that m(E/Q) is finite if 

L(E/Q,s) has a zero at s — 1 of order < 1, and that gE/q is equal to the order of the 
zero of L(E/Q, s) at s — 1. His proof relies heavily on the theory of Heegner points and 
the work of Gross and Zagier. However, when L(E/Q,s) has a zero at s = 1 of order 
Q\ | > 2, all is shrouded in mystery. It is unknown whether or not L(E/Q,s) has a zero 

at s = 1 of order > gE/q, and no link between L(E/Q,s) and m(E/Q) has ever been 
proven. In particular, the finiteness of Ul(E/Q) is unknown for a single elliptic curve 
E/Q with gE/q > 2. This state of affairs is particularly galling for number theorists, since 
the conjecture of Birch and Swinnerton-Dyer even gives an exact formula for the order 
of Ul(E/Q), which predicts that in the vast majority of numerical examples m(E/Q) is 
zero when gE/q > 2. We also stress that in complete contrast to the situation for finding 
gE/q, it is impossible to calculate Bl(E/Q) by classical descent methods, except for its 
p-primary subgroup for small primes p, usually with p < 5. 

By contrast, in the p-adic world, it has long been known that the main conjectures of 
Iwasawa theory provide a precise link between the Z p -corank of the p-primary subgroup 
of III (.E/Q) and the multiplicity of the zero of certain p-adic L-functions at the point 
s — 1 in the p-adic plane, at least when E has potential good ordinary reduction at p. 
However, it seems that little effort has been made so far to exploit this deep connexion 
for theoretical purposes, and the only numerical applications to date are given in the 
recent paper [T7] , see also [15] , [H] for the case of supersingular reduction at p . The aim 
of this paper is to make some modest first steps in this direction in the special case of 
elliptic curves with complex multiplication. We begin with a theoretical result. For each 
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prime p, let t E /Q, p denote the Z p -corank of the p-primary subgroup of Ul(E/Q). While 
we cannot prove the vanishing of £e/q, p for infinitely many p in any new cases, we can 
at least establish the following rather general weak upper bound for £e/q, p for sufficiently 
large good ordinary primes p. 

Theorem 1.1. Assume that E/Q admits complex multiplication. For each e > 0, there 
exists an explicitly computable number c(E,e), depending only on E and e, such that 

(!) t E/Q>p < (1 + e)p - g E/Q 

for all primes p > c(E, e) where E has good ordinary reduction. 

We remark that a much stronger form of Theorem 11.11 is known in the geometric 
analogue (i.e. the case of an elliptic curve over a function field in one variable over a 
finite field), thanks to the work of Artin and Tate |22j. Indeed, their work shows that, in 
the geometric analogue, the number of copies of Q p /Z p occuring in the Tate-Shafarevich 
group has an absolute upper bound which is independent of p. We also note in passing 
that, after many special cases were established by earlier authors, the Dokchitser brothers 
[7] have finally proven that, for all elliptic curves E over Q and all primes p, the parity of 
9 e/q + tE/Q, P is equal to the parity of the order of zero at s — 1 of the complex L-function 
of E/Q; in particular, the parity of t E /Q >p does not depend on p. 

In the second part of the paper, we show that the p-adic methods of Iwasawa theory 
enable one to push numerical calculations of t E /q iP over a much larger range of p where 
E admits good ordinary reduction than is possible by classical methods. We consider the 
elliptic curves 

(2) y 2 = x 3 - I7x 
and 

(3) y 2 = x 3 + Ux. 

Both curves admit complex multiplication by the ring of Gaussian integers Z[i], and have 
9e/q — 2. The conjecture of Birch and Swinnerton-Dyer predicts that Ul(E/Q) = for 
both curves. 

Theorem 1.2. For the elliptic curves (J2J) and ([3]) ; we have t E /Q, p = for all primes p 
with p = 1 mod 4 and p < 13500, excluding p = 17 for ([2]). Moreover Ul(E/Q)(p) = 
for all such primes p. 

It is surprising that, for the curve ([2]), the p-adic L-function we consider has no other 
zeroes beyond the zero of order 2 arising from the fact that E(Q) has rank 2, for all primes 
p < 13500 with p = 1 mod 4 and p distinct from 17 (more precisely, our computations 
show that, for this curve and these primes p, the power series Hp(T) in X[[T]], whose 
existence is given by Proposition 12. 4[ is of the form T 2 . J P (T), where Jp(T) is a unit in 
X[[T]]). For the curve ([3]), there are additional zeroes for precisely the two primes p = 29 
and 277 amongst all p = 1 mod 4 with p < 13500. 

We are grateful to C. Wuthrich for his comments on our work, and some independent 
numerical calculations based on [T7] . 
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2 p-adic L-functions and the main conjecture 



In this section, we briefly explain the theoretical aspects of the Iwasawa theory of elliptic 
curves with complex multiplication, which underlie the proof of Theorem 11.11 and the 
computational work described in §3. For a systematic account of the Iwasawa theory for 
curves with complex multiplication, see the forthcoming book [I]. 

Let K be an imaginary quadratic field, and write Ok for the ring of integers of 
K. We fix an embedding of K in C. Let E be an elliptic curve defined over K 
such that Endx(-E) ®z Q is isomorphic to K, where End k{E) denotes the ring of K- 
endomorphisms of E. It is well-known that E is isogenous over K to a curve whose ring 
of i^-endomorphisms is isomorphic to Ok- As the results we shall discuss depend only 
on the isogeny class of E, we shall assume henceforth that 



The existence of such an elliptic curve defined over K implies, by the classical theory 
of complex multiplication, that K has class number 1. We choose a global minimal 
Weierstrass equation for E 



whose coefficients aj belong to Ok- Write ipE for the Grossencharacter of K attached to 
E by the theory of complex multiplication. Recall that if v is a finite place of K such 
that E has good reduction at v, and if k v denotes the residue field of v, then the theory of 
complex multiplication shows that there is a unique element tt v of End k{E) such that the 
reduction of ir v modulo v is the Frobenius endomorphism of the reduction of E modulo 
v, relative to k v . The Grossencharacter ip E is then given by i[>e(v) = ir v . We write f for 
the conductor of ip E - It is well known that the prime factors of f are precisely the primes 
of K where E has bad reduction. For each integer n > 1, we define 



(4) 



End K (E) ~ O k . 



(5) 



y 2 + aixy + a 3 y = x 3 + a 2 x 2 + a^x + a§ 




i 



Further, L (ip E > s ) denote the primitive Hecke L-function of ip E . 
Let £ be the period lattice of the Neron differential 

dx 



2y + a\X + a 3 ' 



and let 



®(z,C) : C/C ~ E(C) 



be the isomorphism given by 



a\ + 4a 2 1 



-0'0,£) - ai(>0,£) 



a\ + 4a 2 



) " as)) 
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where p(z, C) denotes the Weierstrass p-function attached to C Since Ok has class 
number 1, there exists Vl^ in C x such that 

(6) £ = fioo O k . 

As we shall explain below (see (1241) ). it is well-known that 

(7) n^L(r E ,n)EK 
for all integers n > 1. Moreover, 

(8) L$% n) ^ for n > 3, 

since the Euler product converges when n > 3 ( in fact, (ED also holds for n = 2, but the 
proof is more complicated). Put 

(9) c p (E) = Q^L(r E ,p). 

If f) is any integral ideal of K, we define 

(10) £„ = Ker (e{K) , 

where h is any generator of f). Define _E p oo = U E pn . Let be any Galois extension 

n>l 

of A'. For each non-archimedean place w of A4, let .M^ be the union of the completions 
at u of all finite extensions of K contained in Ai. We recall that the classical p°°-Selmer 
group of E over M. is defined by 

Se\ p (E/M) = Ker (H 1 (Gal(M / M) , E poo ) -> ^^Gal^/A^), £(A4 W )), 

where w runs over all non-archimedean places of A4. The Galois group of M. over A" 
operates on Sel p (E/A4) in the natural fashion. If A is any C^-module, A(p) will denote 
the submodule consisting of all elements which are all annihilated by some power of a 
generator of p. Then we have the exact sequence 

(11) -> E(M) ®o K {Kp/Op) -> Sel p (£/M) -> ni(£/A<)(p) -> 0, 

where IIl(i?/A / i) denotes the Tate-Shafarevich group of E over Ji4. We will also need to 
consider the compact Z p -module 

(12) X P {E/M) = Hom(Sel p (£/.M),Q p /Z p ). 

When M. is any finite extension of K, classical arguments from Galois cohomology show 
that X p (E/A4) is a finitely generated Z p -module. In particular, we define 

(13) s p = Zp-rank of X p (E/K), t p = Z p -corank of Ul(E/K)(p). 
It is clear from ffTTl) that we have 



(14) s p = t p + n E/K , 

where n E /K — C^-rank of E(K). We denote the number of roots of unity in K by w. 



Theorem 2.1. Let p be a prime number such that (i) (p, f) = 1, (ii) (p,w) = 1, and (Hi) 
p splits in K , saypOx = PP*- Let m p (resp. m p *) denote ord p (c p (£')) (resp. ord p *(c p (£')). 
Then we always have 

(15) m p > s p , m p * > s p *. 

Moreover, if either m p = n E /x or m p* — n E/K, then Ul(E / K)(p) is finite. 

In fact, a stronger form of the theorem holds if E is defined over Q. Assume therefore 
that E is defined over Q, and write L(E/Q,s) for the Hasse-Weil L-function of E over 
Q. By the theorem of Deuring-Weil, we have 

(16) L(E/Q,s) = L(^ E} s) } 

where the L-function on the right is the complex L-function attached to the Grossencharacter 

IpE- Put 

(17) gE/Q — rank of E(Q), r E /Q = order of zero at s = 1 of L(E/Q,s). 

As E is defined over Q, it has real periods, and we define to be its smallest positive 
real period. Thus 

(is) nt = n 00 a(E), 

where u(E) is some non-zero element of Ok- Put 

(19) 4(E) = L(r E ,p). 
Let E p denote the reduction of E modulo p. 

Theorem 2.2. Assume that E is defined over Q. Then Cp(E) G Q. Let p be a prime 
number such that (i) E has good reduction at p, (ii) (p,w) = 1, (Hi) p splits in K, and 
(iv) (p, a(E)) = 1. Assume also that r^/Q = gE/Q mod 2. If we have 

(20) oxd p ( C ;(E))<g E/Q + 2, 
then m(E/ K)(p) is finite. Moreover, if 

(21) ord p (c+(E)) = g E/Q , 

and E p (¥ p ) has order prime to p with (p,Q) = 1, then m(E/K)(p) = 0. 

We shall say a prime p satisfying (i), (ii), (iii), and (iv) of Theorem 12.21 is exceptional 
for E if 

(22) ord p (c+(L)) > 
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For example, for the curve ([31) , with gE/Q = 2, the primes p = 29, 277 are the only 
exceptional primes congruent to 1 mod 4 for p < 13500. However, for p = 29, 277, 
our calculations show that ord p (Cp(E)) = 3, and so Ul(E/ K)(p) is finite. For these 
two exceptional primes, C. Wuthrich computed the Mazur-Swinnerton-Dyer p-adic L 
function for the curve E defined by ([3]), and showed in this way that we have also that 
Ul(E / K)(p) = for both primes. It is surprising that there are no exceptional primes p 
congruent to 1 mod 4 for the curve ([2]) with p < 13500. 

For all integers n > 1, let £*(z,C) denote the Eisenstein series of C, as defined by 
Eisenstein (see Weil [2T] or [H]). In particular, for n > 3, we have 

(23) e :(z , C ) = ^(ff- 2 Mz ,c)). 

The following fundamental formula, which will be the basis of our subsequent work, is 
proven in [5]. 

Theorem 2.3. Let f be any generator of the conductor f of ipE- Then, for all integers 
n > 1, we have £*(Pf;C) e K(E f ), and 

(24) w fi" n n) = f- n Trace* (E/)/K (t* i^f, Cj ) . 

Note that ([7j) is an immediate consequence of this result. 

We now fix a prime number p satisfying (p, f) = (p,w) = 1 and pOx = PP*, where 
p, p* are distinct ideals of K. We pick one of these primes, say p, and an embedding 

(25) i p : K Q p , 

which induces p on K. For simplicity, we shall usually omit ip from subsequent formulae. 
As was shown in [6], (see also [1]), there exists a p-adic L-function which essentially 
interpolates the image of the L- values (J7j). We only state the precise result for the branch 
of this p-adic L-function which is needed for the proof of Theorem 1.1. 

Let E p be the formal group of E at p, so that we can take t = —x/y to be a parameter 
of E p . Let G m be the formal multiplicative group, and write u for its parameter. Denote 
by I the ring of integers of the completion of the maximal unramified extension of Q p . 
If T is a variable, then X[[T]] will denote, as usual, the ring of formal power series in T 
with coefficients in X. As E p is a formal group of height 1 ( in fact, it is even a Lubin- 
Tate group over Z p attached to the parameter ^(p)), it is well-known that there is an 
isomorphism over X 

(26) 5 P : G m ~ E p , 

which is given by a formal power series t = 5 p (u) in X[[it]]. We can then define the p-adic 
period Qp in X x by 

(27) f2 p = p \u=o- 

u 
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Proposition 2.4. Assume fioo and fi p are fixed. Then there exists a unique power series 
Hp(T) in X[[T]] such that, for all integers n > 1 with n = 1 mod (p — 1), we /jave 

(28) fi p - n ^ P ((l+p) n -l) =n^(n-l)!L(^,") (l - 

For a proof of the existence of this p-adic L-function H P (T), see [6] or [I]. Note that when 
n = 1 mod (p — 1), f is the exact conductor of and so Lf (t/^s) coincides with the 
primitive L-function L s). 

This p-adic L-function is related to descent theory on E via the so-called "one vari- 
able main conjecture" for the Iwasawa theory of E over the unique Z p -extension of K 
unramified outside p. Define 

= K(E pOC ), G = Gal(JVK). 
The action of G on Epoo defines a homomorphism 

(29) X p ■ G -> Aut(E p oc) = Z p x 

which is an isomorphism because i? p is a Lubin-Tate group. Let be the unique Z p - 
extension contained in F^ (class field theory shows that is the unique Z p -extension 
of K unramified outside p). Put 

T = G&iKn/K), A(r) = limZ p [r/f/], 

where U runs over the open subgroups of T. There is a natural continuous action of T on 
Xp(E/K tX) ), and this extends to an action of the Iwasawa algebra A(r). Since it is known 
that Xp(E/K (X) ) is a finitely generated torsion A(r)-module (see [BJ, [1]), it follows from 
the structure theory for such modules that there is an exact sequence of A(r)-modules 

r 

-> A(r)//< A(r) - XpiE/K^) ^D^O 
1=1 

where /i, • • • , / r are non-zero elements of A(r) and D is a finite A(r)-module. We now 
pick the unique topological generator 7 P of T such that xp(7p) — 1 + P> an d write 

j : A(r) - Zp[pni 

for the unique isomorphism of topological Z p -algebras with j(7p) = 1 + T. For simplicity, 
put 



(30) Bp(T)=j([[f i 



i=i 



The power series B P (T) is uniquely determined up to multiplication by a unit in Z P [[T]], 
and is called a characteristic power series for X P (E/K 00 ). We shall make essential use of 
the following deep result (see [IB], or [1]). 
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Theorem 2.5. (One variable main conjecture) 

H p ((l+p)(l + T)-l)l[[T}} = B p (T)l[[T}}. 
In addition, we shall need (see [131 Chap. 4, Cor. 16]):- 

Proposition 2.6. The two groups Ul(E/K)(p) and Ul(E/K)(p*) have the same Z p - 
corank. In particular, one is finite if and only if the other is also finite. 



We can now prove Theorem 12 .11 Since Xp is an isomorphism, we have Epoo^Koo) = 0. It 
follows that the restriction map from S p (E/K) to S P (E / K^) is injective, and by duality, 
we obtain a surjective T-homomorphism 

(31) XpiE/Koo) ^X P (E/K). 

Recall that s p denotes the Z p -rank of X P (E/K). As T acts trivially on X P (E/K), it follows 
from fl3TT) by a well-known property of characteristic ideals of torsion A(r)-modules, that 
T Sv must divide B p (T) in Z P [[T]]. Hence we conclude from Theorem 12.51 that 

(32) H p ((l+p)(l + T)-l) = T s >h(T) 

for some h(T) in X[[T]]. Evaluating both sides at (l+p) n_1 — 1 for any n in Z, we conclude 
that we always have 

(33) H p ((l+p) n - 1) = modi/". 

Taking n = p, and noting that ^1 — is a unit at p, we conclude from fl33|) and 

Proposition 12.41 that 

(34) c p (E) = mod p Sp . 
Replacing p by p*, the same argument shows that 

(35) c p (E) = mod (p*) s >* . 

Hence (j!5p follows. Moreover, if m p = Ue/Ki then t p = and so t p * = by Proposition 
12.61 A similar argument holds if m p * = ue/k- This completes the proof of Theorem 
I2TT1 □ 



Corollary 2.7. We have m p = ue/k if and only if the characteristic power series of 
X^E/Koo) can be taken to be T nE i K . 

Proof. If m p = ue/k, the above argument shows that we must have s p = n E /K, and h(0) 
a p-adic unit. It follows from Theorem 12.51 that B P {T) must be of the form T nE i K times a 
unit in Z P [[T]]. Conversely, if the characteristic power series of X p {E jK^) can be taken 
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to be T nE / K , then Theorem 12.51 shows that H P (T) is equal to T Ue i k times a unit in X[[T]], 
whence it is plain that m p = ue/k- This completes the proof. □ 

Our numerical calculations show that, for the elliptic curve 

y 2 = x 3 — 17x, with n E /K = 2, 

we have m p = 2 for all primes p with p = 1 mod 4, p ^ 17, and p < 13500. Thus the 
characteristic power series of Xp(E / K^) is T 2 for all such primes. On the other hand, 
for the elliptic curve 

y 2 = x 3 + lAx, with n E /K = 2, 

we have m p = 2 for all primes p with p = 1 mod 4 and p < 13500, except p = 29, 277. 
Thus for all such primes, with the exception of these two, the characteristic power series 
of X^E/Kn) isT 2 . 

We now establish Theorem 12.21 Assuming that E is defined over Q, we have 

(36) f = f, and ip E (a) = 4> E (a) 
for all integral ideals o of K with (a, f) = 1. Hence 

L(r E ,s) = L(r E , S ). 

Evaluating at s = p, we conclude that 

L(r E , P )eR. 

As fi+ is real, it follows that 

c+{E) e KHR = Q. 

As before, let t p (resp. t p *) be the Z p -corank of Vl(E/K)(p) (resp. m(E/K)(p*)), and 
let t E m,p be the Z p -corank of Ul(E/Q)(p). Then we claim that 

(37) ^E/Q,p = t p = t p *. 

Indeed, the second equality is just Proposition 12.61 To prove the first equality, note that 
E is isogenous over Q to the twist E' of E by the quadratic character of K (see, for 
example, |8j). Thus, m(E/Q)(p) and m(E' /Q)(p) have the same Z p -corank, and hence 
the Zp-corank of m(E/K)(p) is equal to 2t E /q tP . On the other hand, the Z p -corank of 
Ul(E/ K){p) is clearly equal to tp + t p * = 2t E /q jP , by Proposition 12.61 Hence t E /Q tP = tp, 
thereby proving (|37|) . 

Assume now that Ul(E / K)(p) is infinite, so that t E /Q lP > 0. The parity theorem for 
E/Q and the prime p (due to Greenberg in this case, but see the more general results of 
[Zj, P2]) asserts that 

9 e/q + t E /Q, P = r E/Q mod 2. 
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By our hypothesis that gE/q and te/q have the same parity, it follows that tE/q, P must 
be even, and therefore £_e/q, p > 2, in particular. Hence by (1371) t p > 2. Noting that 
9e/q = n>E/K, and that (p,a(E)) = 1, we conclude from (1341 that 

ord p (c+(£)) >(? B / Q + 2. 

Hence, if ( 1201 holds, then we must have Ul(E/K)(p) is finite. 

Assume now that ord p (Cp (E)) = gE/q- We deduce easily from Theorem 12.51 and ( 1321 . 
that 

B P (T) = T n */«R P (T), 

where R P (T) is a unit in Z P [[T]], so that R p (0) is a unit in Z p . Hence, by an important 
general theorem of Perrin-Riou [13], it follows that the canonical p-adic height pairing 



< , > p : E(K) ®o % P x E(K) ®o Z p -> Q p , 
where is embedded in Z p via i p , is non-degenerate. Further, we have that 

*I>e/k(p)' 



(38) #(m(E/K)(p)) x det < , > p x 1 - 



Np 



is also a p-adic unit , where det denotes the determinant of the height pairing; for this last 
assertion, we need our hypothesis that (p, 6) = 1. However, if E p (¥ p ) has order prime to p 
and (p, 6) = 1, then it follows from the results of [13] that det < , > p is a p-adic integer. 
Hence we conclude from ( I38jl that Ul(E/K)(p) is trivial. A similar argument proves 
the corresponding statement for Ul(E/K)(p*) and this completes the proof of Theorem 
[2721 □ 

We next establish an upper bound for t p and t p * when p is a sufficiently large prime 
which splits in K as pOx = PP*- 

Theorem 2.8. For each e > 0, there exists an explicitly computable number c(E,e), 
depending only on E and e, such that 

(39) t p < (1 + e)p - n E /K, V < i 1 + e )P - n E/K, 

for all primes p > c(E, e) which split in K as pOx = PP*- 

We note that, when E is defined over Q, Theorem 11.11 is an immediate consequence of 



this result, since, thanks to fl37|) . we then have tE/Q )P = t p , n E / K - 

We now give the proof of Theorem 12.81 which is a simple application of the formula 
(12"4"|) . and the fact that L{ip p E) p) ^ (recall that the latter assertion is true because the 
Euler product for L(ip E , s) converges for s = p). Put 

(40) Q p = Tr&ce K (E f )/K \ £ p \ • 

We emphasize that in the proof E is fixed and p is varying over all sufficiently large prime 
numbers which split in K. 



10 



Lemma 2.9. We have \Q P \ < d\, where d\ > 1 is a real number depending only on E 
and not on p. 

Proof. We may assume p > 3. By ( 1231) . we have 

(41) ^*(t' £ )^S(s)" (p(z ' £))I ">' 

Let B denote a set of integral ideals of K, prime to f, such that the Galois group of 
K(Ej)/K consists precisely of the Artin symbols of the ideals b in B. From the 
definition of the Grossencharacter ipE and ( T4T1) . we have 



Thus, by Cauchy's integral formula, we obtain 



' P \ f ' J (P~ 1) 2m 7 Cb ^ _ M ) Qo n - 1 ' 

where Cb is a circle with centre ^ E ^ noc an d sufficiently small radius so that no element 
of C lies in or on C^- Estimating the integral, it is plain that 



V 



where d<i > 1 depends only on E. Summing over all b in B, the assertion of the lemma 
follows. □ 

Lemma 2.10. There exists a rational integer d% > 1, depending only on E and not on p, 
such that 



di( P -iy.s;(^,c) 



is an algebraic integer. 

Proof. We may assume that p > 5. Since 

£;(Xz,XC) = \- p £;(z,c) 

for any complex number A, it suffices to prove the lemma when our generalized Weierstrass 
equation (jSJ) for E has the property that g2(C)/2 and gz{C) both belong to Ok] here g-2,{£>) 
and gz{C) denote the usual Weierstrass invariants attached to (JSJ). Now the differential 
equation 

(p'(z, C)f = 4p(*, Cf - g 2 (C)p(z, C) - g 3 (C) 

implies that 

pW(z,£) = 6 P (z,C) 2 - 9 4f 1 - 
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A simple recurrence argument on n then shows that, for all n > 1, we have 

p {2n \z,C) = D n (p(z,£)), 

where D n (X) is a polynomial in 0k- [X] of degree n + 1. It follows immediately that 

p {2n+l \z,C) = B n (p(z,C))p'(z,C), 

where B n (X) = -jL(D n (X)) is a polynomial of degree n in Ok[X]. Taking n = the 
assertion the lemma is now clear from (I4ip . on taking d$ to be a positive integer such that 



are algebraic integers. □ 

We can now complete the proof of Theorem 12.81 We may assume that (p, f) = (p, w) = 
1. By fl24l) . we then have 

(42) |O^L(^,p)| p = |6 p | p = |(p-l)!6 p | p , 
and similarly for p*. Moreover, in view of Lemmas 12.91 and 12. 10\ 

d p 3 ( P -i)\e p 

is an element of Ok whose complex absolute value is at most d p (p — 1)!, where d^ > 1 
does not depend on p. Since O p ^ because L(ip p El p) ^ 0, we conclude from the product 
formula that 

(43) |dg (p - l)!e p |„ x |dg(p - l)!6 p | r > rf 4 - 2p ((p - I)!)" 2 . 
It follows that, we conclude that for each e > 0, we have 

|e p | p x |e p | r >p-2(i+«) P 

for all p > c(E, e)). On the other hand, by Theorem 12. 1[ and (1421) . we have 

|e p | p x |e p | r <p-(^+v). 

Thus 

s p + s r < 2(1 + e)p 

when p > c(-E, e). As s p = s p *, the proof of the theorem is complete. □ 
Define the p-adic L-functions 

2eM = H p ((l+p) s -l), £ E>P 4s) = tf r ((l+p) s -l), 

where s is now a variable in Z p . Put 

r E}P = ord s= i£ SiP (s), r E)P * = ord s= i£ E)P *(s). 

We end this section by remarking that exactly the same argument which establishes 
Theorem (12.81) proves the following result. 
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Theorem 2.11. For each e > 0, there exists an explicitly computable number c(E,e) such 
that 

te, p + r E ,p* < 2(1 + e)p 
for all primes p > c(E, e) with p splitting in K as pOx = PP*- 

3 Computations for y 2 = x 3 — Dx 

The goal of this section is to explain how one can use formula (1211) to compute 

Cp (E) = n-jL(r E , P ) 

in practice, for the family of curves 

E : y 2 = x 3 - Dx, 

where D is a fourth-power free non-zero rational integer. For this family of curves, K = 
Q(i) and the isomorphism (jlj) is given explicitly by mapping i to the endomorphism which 
sends (x, y) to (—x, iy). See p], [TO] for earlier computational work on the Iwasawa theory 
of this family of curves. 

We begin by analysing the Galois theory of the fields K(Ef) where f again denotes the 
conductor of ipE- If f) is any integral ideal of K, we write 

0(f)) = #((Z[z]/h) x ). 

The next lemma is a very easy consequence of the existence of the Grossencharacter ipE 
(see [5], Lemma 3, or [3], Lemma 7) and the fact that no root of unity in K is = 1 mod h, 
when 1) is a multiple of f. 

Lemma 3.1. Let f) be any integral ideal of K which is divisible by the conductor f of ipE- 
Then K(E t) ) coincides with the ray class field of K modulo h. In particular, the degree of 
K{E h )/K is equal to 0(h)/4. 

The following well-known lemma computes f for the curve E. 

Lemma 3.2. Let A be the product of the distinct prime factors of D. Then f = 4AZ[z] 
ifD^l mod 4 and f = (1 + i) 3 A Z[i] if D = 1 mod 4. 

Let E' denote the elliptic curve in our family with D — 1, i.e. 
(44) E' : y 2 = x 3 — x. 

Lemma 3.3. Assume that E = E D with D divisible by an odd power of an odd prime. 
Then the extension K (£ , ( 1+i )fc) is equal to K when k = I, to K(D l l 2 ) when k = 2, and 
to K(D l l 4 ) when k = 3. For k > 3, we have 

K{E {l+l)k ) = K{D^\E[ 1+l)k ) 
and this field has degree 2 k ~ 1 over K , and degree 4 over K (E'^ 1+ ^ k 
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Proof. The assertions for k = 1 and k = 2 are readily verified. Put a = D 1 ^ 4 . Over K(a), 
we have an isomorphism 

(45) E~E' 

given by mapping the point (x,y) on E to the point (x/a 2 ,y/a 3 ) on Now E' has 
conductor (1 + i) 3 , and K (^E^ 1+ ^ 3 j = K, whence it follows from ( 1451) that K (E(i +i yj) = 

K(a). Similarly, if k > 3, then (T4"5l) implies that K (-E7( 1+i )fc) = -K" ^a, -E'[ 1+i )fe j • Now 

Lemma 13.11 applied to E' shows that the degree of K ^E'^ +i ^ h j over K is 2 k ~ 3 when 
k > 3. Moreover, as £" has good reduction outside the prime (1 + z)Z[z], this is the only 
prime of K which can ramify in the extension K ^E'^ 1+i ^ k J . Hence [K(a) : K\ = 4, and 

K(a) fl K (E'^ 1+i ^ k J = X because of the existence of the odd prime factor dividing D to 
an odd power. This completes the proof of the lemma. □ 

Lemma 3.4. Assume that D is odd. Then the degree of K(Ed)/ K is <^(DZ[z]). 

Proof. We can assume D / 1. By the Weil pairing, K(E' D ) contains the field generated 
over K by the |Z)|-th roots of unity. Hence K(E' D ) contains (the sign of D is irrelevant 
since K contains the fourth roots of unity). As above, let a = D 1 / 4 . Thus K(E' D ,a) has 
degree at most 2 over K(E' D ). 

Let Ro denote the ray class field of K modulo WL[i\. Let (u, v) be a primitive D- 
division point on E. Then the classical theory of complex multiplication shows that 
Ro = K(u 2 ), and that [Rd : K] = <p(DZ[i}) / 4. To prove the lemma, it therefore suffices 
to show that there exists an element r of GaX{K{Eo) / K) such that r fixes Rd, and r is 
of exact order 4. We do this as follows. As remarked in the previous paragraph, K(E' D ) 
has degree 0(DZ[i]) over K because D is odd. Moreover, a primitive D-division point on 
E' is given by (u',v'), where v! = u/a 2 , v' = v/a 3 . Recalling that multiplication by i on 
E' is given by sending (x,y) to (—x,iy), it follows that there exists a in Gal(K(E' D )/ K) 
such that 



(46) a(u',v r ) = (—u',iv r ). 

Now let cr denote any extension of a to the field K(E' D , a) = K(Ee>, a). Since this field 
has degree at most 2 over K(E' D ), we must have that either a(a) = —a or o~{a) = a. 
Applying o to (u',v'), we conclude from (IIBI) that 

ou = u, o v = v or cr u = —u, o~v = iv. 

It follows from these formulae that <r 4 fixes K(Ed), but a 2 does not. Also o fixes Rd- 
Hence we may take r to be restriction of a to GsX{K{Ed) /K), and the proof of the lemma 
is complete. □ 

Lemma 3.5. Let D = 2 a M, where a = 1 or 3, and M is odd. Then K(Em) has degree 
4>(MZ[i]) over K, and K(E M , D 1/4 ) has degree 40(MZ[i]) over K. 
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Proof. As remarked earlier, K(E' M ) has degree 0(MZ[i]) over K because M is odd. Also, 
by Lemma [3.11 K(E' 8M ) is the ray class field of K modulo 8M, and hence we have 

[K(E' 8M ) : K] = 80(MZ[z]). 

Since [K(E' 8 ) : K] = 8 by Lemma I3TTI we conclude that 

(47) K(E' M ) n K(E' 8 ) = K. 

By the Weil pairing, K(E' M ) contains the field of of |M|-th roots of unity, and hence also 
\/M. Similarly, K(E' a ) contains the eighth roots of unity, and so also a/2. But K{\pX)jK 
is an extension of degree 2, and thus, by ( 1471) . v^2 does not belong to K(E' M ). It follows 
that \f~D does not belong to K(E' M ) since a = 1 or 3. Hence 

[K(E' M ,a):K] = 40(MZ[z]). 

But E and E' are isomorphic over K(a), whence 

K{E' M ,a) = K{E M ,a). 

On the other hand, it is clear that [K(Em,oc) : K] divides 40(MZ[«]). It follows that 

[K(E M ) : K] = <f>{MZ\i]), [K(E M , a) : K{E M )\ = 4, 

and the proof of the lemma is complete. □ 

We now briefly describe the theoretical steps underlying our numerical calculations 
of ord p (Cp (E)) for the curve E when D is divisible by at least one odd prime. The 
Weierstrass equation associated to E is 

(48) p\z,C) 2 = Ap{z,Cf-ADp{ Zl C). 
Write f = /Z[i] for the conductor of ipg, and define 

(49) u = p(2j±,£y v=L>(^,A"\/2. 



By Lemma [3.11 K(Ej) is the ray class field of K modulo f. Hence 

(50) K(E f ) = K{u 2 ) = K(u), v e K(u), 

and the degree of K(E^) over K is d = 0(f)/4. As f is divisible by at least two distinct 
primes of K, a theorem of Cassels [2] shows that both u and v are algebraic integers. 
Moreover, we can compute explicitly the monic irreducible polynomial of u over Z[z], which 
has degree d, and which we denote by G(X). Once we have computed this polynomial 
G(X), we can determine 

(51) s m = Tmce K{Ef)/K (u m ) (m = 1, 2, • • • , d - 1) 
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recursively, using the following classical formula. Let 

G(X) = (X - Ul )....(X - u d ) = X d - a l X d ~ l + ■■■ + (-l) d a d 

where <7i, • • • , a d are the elementary symmetric fuctions in u%, ■ ■ ■ ,u d . Then we have (see 
for example, [201 Vol I, p.81]), 

m—1 

(52) s m = (-l) m ~ 1 ma m + £ (-l)*" 1 s m _ h c7 h (m < d) 

h=l 

Now we recall that, by virtue of formulae (l23l) and f l24l) . we have 

(53) 4(E) = -w-HfaiE^dp-iyr'E,, 
where a(E) is as in (fTBl) . and 

E p = Trace K ( Ef )/K (p {p ~ 2) (^■,cj > j 

for all odd primes p. For our curve E = Ed, we have w = 4. Moreover, we have 

tt+ = tt/D 1 / 4 if D > 0, tt+ = Q/i-D/A) 1 / 4 if D < 0, 

where f2 = 2.622058- •• is the least positive real period of the curve E' f )44l) . Hence 
a(E) = 1 when D > 0, and a(-E) = (1 + i) when D < 0. We now fix the value of / 
following the four cases:- (i) D > and D = 1 mod 4, (ii) D < and D = 1 mod 4, 
(iii) .D > and D ^1 mod 4, and (iv) D < 0, and D mod 4. Following these four 
cases, we take / to be 2(1 + i) A, (1 + i) 3 A, 4A, and 4A, so that the respective values of 
fa{E) are given by 2(1 + i)A, -4A, 4A, and 4A(1 + i). 
As explained in the proof of Lemma 12.101 we have 

(54) P w (5= ,cj = (p ) p' , /:) , 

where B P -3 (X) is a polynomial in Z[X] of degree (p — 3)/2. This polynomial can easily 
computed recursively, using the differential equation (|4"8~1) (see the explicit examples below 
when D — 17 and D = -14). 

As the theory tells us that v G K{u), there exists a polynomial J(X) in K[X] such 
that 

(55) P '{T ,C ) = J Ht' £ ))' 

In fact, in the numerical examples we have considered, it is always the case that J(X) 
belongs to Z[i][l//][X], and we shall assume henceforth that this is the case. Hence, 
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multiplying together B P s (X) and J(X), and using the fact that G yp if, C-JJ = 0, we 
deduce that 




where A p (X) is a polynomial in Z[i][l//][X] of degree at most d — 1. Writing A p (X) = 
d-l 

E cijpXi, it follows that 

3=0 

d-l 

= Y<^aj :P Sj, 

and we can then compute c p (E) using the formula fl53l) . The machine then calculates 
ord p (Cp (E 1 )) (which our theory shows is always > 0), followed by 

Cp(E) mod p k , where k = ord p (Cp (E)) + 1. 

Finally, we note that E p (¥ p ) has order prime to p for all p > 5 with (p,D) = 1. This is clear 
when p = 3 mod 4, since then E p is supersingular. For p = 1 mod 4, say pZ[z] = p.p*, 
we have a p = Trace^/Q('?/'E(p)) must be even because 2 is ramified in Q(i), from which it 
follows that we cannot have a p — 1, which clearly implies the assertion for these primes 
P- 

The computations described above have been carried out for the two curves D — 17 
and D = —14 for all primes p with p = 1 mod 4 and p < 13, 500 (the prime p = 17 is 
excluded when D = 17). We have 

D = 17, / = 2(l + i)17, d = 256 
D = -14, / = 56, d = 384. 

For both cases, the polynomials G(X), J(X), Bps (X), A p (X) have been computed ex- 
plicitly, and are given at |19j . as they are too elaborate to include here. However, as an 
illustrative example where the coefficients are still not too enormous, we give now the 
polynomials Bi^X), which occur for p = 29, 

D = -14 

B 13 (X) = 7496723869173 x 2 24 (431525237696X + 3877463640960X 3 + 5545863414000X 5 
+2565173520000X 7 + 490959787500X 9 + 40724775000X 11 + 1212046875X 13 ) 
D = 17 

B 13 (X) = 7496723869173 x 2 24 (1383348216959X - 10236515835780X 3 + 12057373443375X 5 
-4592819790000X 7 + 723915196875X 9 - 49451512500X 11 + 1212046875X 13 ) 

For these two curves, and our range of p, our computations show that ord p (Cp (E)) = 2, 
except for the two primes p = 29, 277 for the curve with D = —14. Table I below gives 
the value of c£(E) mod p 3 for both curves and our p in the range 5 < p < 1000, while 
Table II gives the analogous data for p in the range 11000 < p < 12000. Again the values 
for all our p in the range p < 13500 can be found at [19J. 
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Table I: c*(E) ■ p~ 2 mod p for 5 «C p < 1000 and p = 1 mod 4. 



p 


D — 17 


D = 


5 


3 


4 


17 


not valid 


7 


37 


20 


9 


53 


45 


42 


73 


26 


56 


97 


83 


90 


109 


34 


68 


137 


107 


126 


157 


145 


48 


181 


70 


157 


197 


145 


54 


233 


34 


174 


257 


199 


9 


277 


235 





293 


250 


133 


317 


237 


191 


349 


113 


263 


373 


75 


236 


397 


78 


68 


409 


11 


313 


433 


432 


152 


457 


288 


376 


509 


103 


407 


541 


33 


422 


569 


423 


209 


593 


523 


18 


613 


429 


590 


641 


285 


489 


661 


20 


330 


677 


332 


185 


709 


437 


108 


757 


357 


672 


769 


751 


343 


797 


123 


93 



p 


D — 17 


D = 


13 


8 


4 


29 


22 





41 


29 


12 


61 


26 


60 


89 


21 


65 


101 


59 


53 


113 


36 


47 


149 


60 


111 


173 


44 


149 


193 


115 


11 


229 


178 


109 


241 


141 


7 


269 


188 


139 


281 


129 


107 


313 


69 


245 


337 


19 


151 


353 


143 


15 


389 


257 


300 


401 


349 


340 


421 


152 


244 


449 


423 


140 


461 


133 


37 


521 


106 


423 


557 


276 


84 


577 


39 


212 


601 


373 


508 


617 


133 


536 


653 


96 


540 


673 


630 


197 


701 


105 


95 


733 


260 


462 


761 


363 


596 


773 


13 


369 


809 


443 


212 
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V 


D — 17 


D = -14 


V 


D — 17 


D = 


821 


6 


347 


829 


645 


823 


853 


48 


635 


857 


5 


502 


877 


132 


603 


881 


82 


591 


929 


845 


766 


937 


341 


100 


941 


253 


642 


953 


794 


866 


977 


548 


98 


997 


302 


401 



Table II: c+(E) ■ p~ 2 mod p for 11000 < p < 12000 and p = 1 mod 4. 



p 


D — 17 


D = -14 


p 


D — 17 


D = - 


11057 


3236 


10336 


11069 


7768 


6637 


11093 


9234 


5437 


11113 


832 


9242 


11117 


6204 


7965 


11149 


8885 


1364 


11161 


1292 


1636 


11173 


587 


10503 


11177 


6184 


4427 


11197 


8804 


6750 


11213 


6409 


8508 


11257 


192 


1839 


11261 


700 


6850 


11273 


5932 


510 


11317 


1969 


2892 


11321 


5451 


10402 


11329 


5635 


9145 


11353 


3322 


7820 


11369 


6790 


11276 


11393 


4532 


358 


11437 


10570 


3120 


11489 


8715 


10941 


11497 


4837 


6424 


11549 


7265 


2757 


11593 


225 


369 


11597 


8864 


7113 


11617 


10691 


1052 


11621 


7500 


6521 


11633 


293 


5463 


11657 


10665 


4770 


11677 


10365 


11566 


11681 


6023 


5351 


11689 


11553 


3152 


11701 


5851 


11618 


11717 


10185 


8521 


11777 


10882 


3487 


11789 


6221 


3509 


11801 


10632 


3148 


11813 


2123 


3767 


11821 


7340 


128 


11833 


1715 


9412 


11897 


8766 


10281 


11909 


6032 


11519 


11933 


1190 


1783 


11941 


5023 


6379 


11953 


10988 


1162 


11969 


11669 


11573 


11981 


1742 


8384 



Finally, for the curve y 2 = x 3 + 14x and the two exceptional primes p = 29, 277, we have 

4 9 (E)= 27 -29 s mod 29 4 , 
4 77 {E) = 155 • 277 3 mod 277 4 . 
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